CN104954378A - Asymmetric message encryption method and system - Google Patents

Asymmetric message encryption method and system Download PDF

Info

Publication number
CN104954378A
CN104954378A CN201510347584.4A CN201510347584A CN104954378A CN 104954378 A CN104954378 A CN 104954378A CN 201510347584 A CN201510347584 A CN 201510347584A CN 104954378 A CN104954378 A CN 104954378A
Authority
CN
China
Prior art keywords
information
ciphertext
user terminal
server
pki
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Pending
Application number
CN201510347584.4A
Other languages
Chinese (zh)
Inventor
吕文华
刘鹏
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Precious Science And Technology Ltd Of Receipt And Payment
Original Assignee
Precious Science And Technology Ltd Of Receipt And Payment
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Precious Science And Technology Ltd Of Receipt And Payment filed Critical Precious Science And Technology Ltd Of Receipt And Payment
Priority to CN201510347584.4A priority Critical patent/CN104954378A/en
Publication of CN104954378A publication Critical patent/CN104954378A/en
Pending legal-status Critical Current

Links

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/04Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H04L63/0442Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption

Abstract

The invention discloses an asymmetric message encryption method. The method comprises steps as follows: a message sender user terminal receives a public key, sent by a server, of at least one to-be-communicated message receiver user terminal; the message sender user terminal encrypts sent messages with the public key and then sends ciphertexts to the server; the server forwards the ciphertexts sent by the message sender user terminal to the communicated message receiver user terminal; the message receiver user terminal decrypts the received ciphertexts through a private key to check the message content. With the adoption of the method, the safety of the message content between users is guaranteed. The message content of two parties is encrypted by the asymmetric key, the two communication parties can see the message content after encryption, and even the server cannot check the message content. The communication content can be protected and prevented from being checked by a third party. The invention further discloses an asymmetric message encryption system.

Description

A kind of method and system of asymmetric encryption message
Technical field
What the present invention relates to is a kind of method and system of asymmetric encryption message, belongs to safety information technology field.
Background technology
When on market, most of two parties terminal communicates; after information is produced by information sender user terminal; be sent to server; this information is forwarded to receives information method, subscriber terminal by server; the mode of this information communication is not enough to the protectiveness of information; intermediate server or hacker can check the information sent, and intercept or distort, can not protect privacy and the information security of communicating pair.
For the problems referred to above, a lot of operator is encrypted the communication information.The cipher mode used is symmetric key, and encrypting and decrypting all uses a key password.
Inventor finds in the process of research, owing to using symmetric key encryption, some hackers can be avoided the acquisition of information, but information encryption deciphering all uses a key password, and PKI is put again in the server, intermediate server still can intercept information and check, even can also distort information.The information that both sides send has the danger eavesdropped by third party, cannot the privacy of protection information completely.
Summary of the invention
For above-mentioned defect; the invention provides a kind of method and system of asymmetric encryption message; the information of asymmetric secret key pair two parties terminal is used to carry out encryption and decryption; and the process of encryption and decryption realizes in two parties terminal; server only plays the function that information forwards; do not participate in the function of any information encryption and decryption and sign test, server can not see the message content of communicating pair, the privacy of protection both sides and communication security.
For achieving the above object, the present invention carrys out specific implementation by the following technical programs:
The invention provides a kind of method of asymmetric encryption message, the method comprises:
The PKI of at least one receives information method, subscriber terminal of the pre-established communication that information sender user terminal reception server sends;
Information sender user terminal uses public-key to after transmission information encryption, and ciphertext is sent to server;
The ciphertext that information sender user terminal sends is transmitted to the receives information method, subscriber terminal of built vertical communication by server;
Receives information method, subscriber terminal to the decrypt ciphertext received, checks the information content by private key.
Further, the buddy list of server maintenance user terminal, detect pre-communication at least two user terminals, the user terminal to pre-communication sends the PKI of good friend's user terminal.
Further, described information sender user terminal uses public-key to after transmission information encryption, ciphertext is sent to server, specifically comprises:
Ciphertext is sent to server after using the PKI of good friend's user terminal of pre-communication to encrypt respectively transmission information by information sender user terminal.
Further, described receives information method, subscriber terminal, is also comprised after checking the information content the decrypt ciphertext received by private key:
Reply ciphertext is sent to server after using public-key and encrypting return information by receives information method, subscriber terminal, the reply ciphertext of receives information method, subscriber terminal is transmitted to the information sender user terminal of built vertical communication by server, information sender user terminal to the decrypt ciphertext received, checks the information content by private key.
Further, reply ciphertext is sent to server after using public-key and encrypting return information by described receives information method, subscriber terminal, specifically comprises:
Receives information method, subscriber terminal uses the PKI of information sender user terminal, to after return information encryption, reply ciphertext is sent to server.
Present invention also offers a kind of system of asymmetric encryption message, this system comprises:
Server, for sending the PKI of at least one receives information method, subscriber terminal of pre-established communication to information sender user terminal, and is transmitted to the receives information method, subscriber terminal of built vertical communication by the ciphertext that information sender user terminal sends;
Information sender user terminal, for receiving the PKI that described server sends, using public-key to after transmission information encryption, ciphertext is sent to server;
Receives information method, subscriber terminal, for by private key to receive server forward decrypt ciphertext, check the information content.
Further, described server comprises:
Buddy list maintenance module, for the buddy list of maintenance customer's terminal;
Detection module, for detect pre-communication at least two user terminals;
Sending module, for sending the PKI of good friend's user terminal to the user terminal of pre-communication.
Further, described information sender user terminal comprises:
Encrypting module, the PKI for the good friend's user terminal using pre-communication is encrypted respectively to transmission information, generating ciphertext;
Ciphertext sending module, for sending to server by ciphertext;
Ciphertext receiver module, for the reply ciphertext that reception server forwards;
Reply decrypt ciphertext module, for by private key to the decrypt ciphertext received, check the information content.
Further, described receives information method, subscriber terminal comprises:
Return information encrypting module, for using public-key to return information encryption, generating and replying ciphertext;
Reply ciphertext sending module, for reply ciphertext is sent to server.
Further, described receives information method, subscriber terminal also comprises:
Replying ciphertext encryption submodule, for using the PKI of information sender user terminal, reply ciphertext being generated to return information encryption.
The invention has the beneficial effects as follows:
By technical scheme provided by the invention.Ensure that the fail safe of message content between user.Use unsymmetrical key to be encrypted both sides' message content, just can see message content after only having communicating pair to decipher, server also cannot check the content of message.The safety of Content of Communication can be protected, prevent from being checked by third party.
Embodiment
Below technical scheme of the present invention is specifically addressed; it is to be noted; technical scheme of the present invention is not limited to the execution mode described in embodiment; the content of those skilled in the art's reference and reference technical solution of the present invention; the improvement that basis of the present invention is carried out and design, should belong to protection scope of the present invention.
Embodiment one
The invention provides a kind of method of asymmetric encryption message, the method comprises:
The PKI of at least one receives information method, subscriber terminal of the pre-established communication that information sender user terminal reception server sends;
Information sender user terminal uses public-key to after transmission information encryption, and ciphertext is sent to server;
The ciphertext that information sender user terminal sends is transmitted to the receives information method, subscriber terminal of built vertical communication by server;
Receives information method, subscriber terminal to the decrypt ciphertext received, checks the information content by private key.
Further, the buddy list of server maintenance user terminal, detect pre-communication at least two user terminals, the user terminal to pre-communication sends the PKI of good friend's user terminal.
The user terminal of pre-communication obtains the PKI of good friend's user terminal to server.
Further, described information sender user terminal uses public-key to after transmission information encryption, ciphertext is sent to server, specifically comprises:
Ciphertext is sent to server after using the PKI of good friend's user terminal of pre-communication to encrypt respectively transmission information by information sender user terminal.
Further, described receives information method, subscriber terminal, is also comprised after checking the information content the decrypt ciphertext received by private key:
Reply ciphertext is sent to server after using public-key and encrypting return information by receives information method, subscriber terminal, the reply ciphertext of receives information method, subscriber terminal is transmitted to the information sender user terminal of built vertical communication by server, information sender user terminal to the decrypt ciphertext received, checks the information content by private key.
Further, reply ciphertext is sent to server after using public-key and encrypting return information by described receives information method, subscriber terminal, specifically comprises:
Receives information method, subscriber terminal uses the PKI of information sender user terminal, to after return information encryption, reply ciphertext is sent to server.
Embodiment two
The invention provides a kind of system of asymmetric encryption message, this system comprises:
Server, for sending the PKI of at least one receives information method, subscriber terminal of pre-established communication to information sender user terminal, and is transmitted to the receives information method, subscriber terminal of built vertical communication by the ciphertext that information sender user terminal sends;
Information sender user terminal, for receiving the PKI that described server sends, using public-key to after transmission information encryption, ciphertext is sent to server;
Receives information method, subscriber terminal, for by private key to receive server forward decrypt ciphertext, check the information content.
Further, described server comprises:
Buddy list maintenance module, for the buddy list of maintenance customer's terminal;
Detection module, for detect pre-communication at least two user terminals;
Sending module, for sending the PKI of good friend's user terminal to the user terminal of pre-communication.
Further, described information sender user terminal comprises:
Acquisition module, for obtaining the PKI of good friend's user terminal to server;
Encrypting module, the PKI for the good friend's user terminal using pre-communication is encrypted respectively to transmission information, generating ciphertext;
Ciphertext sending module, for sending to server by ciphertext;
Ciphertext receiver module, for the reply ciphertext that reception server forwards;
Reply decrypt ciphertext module, for by private key to the decrypt ciphertext received, check the information content.
Further, described receives information method, subscriber terminal comprises:
Return information encrypting module, for using public-key to return information encryption, generating and replying ciphertext;
Reply ciphertext sending module, for reply ciphertext is sent to server.
Further, described receives information method, subscriber terminal also comprises:
Replying ciphertext encryption submodule, for using the PKI of information sender user terminal, reply ciphertext being generated to return information encryption.
Embodiment three
User chats
Information sender user terminal A, receives information method, subscriber terminal B
When information sender user terminal A will send message to receives information method, subscriber terminal B, first from the PKI of server obtaining information recipient user terminal B;
Information sender user terminal A uses the PKI of receives information method, subscriber terminal B to be encrypted message;
By server, message ciphertext is forwarded on receives information method, subscriber terminal B;
Receives information method, subscriber terminal B, after receiving message ciphertext, uses the private key of receives information method, subscriber terminal B to be decrypted message, checks message original text.
When receives information method, subscriber terminal B will reply message to information sender user terminal A, use and from the PKI of server obtaining information transmit leg user terminal A, reply message is encrypted;
By server, message back ciphertext is forwarded in information sender user terminal A;
Information sender user terminal A, after receiving message back ciphertext, uses the private key of information sender user terminal A to be decrypted message, checks message original text.
Embodiment four
Multi-person conference room
Server, when creating meeting room, selectes participant A, B, C, D;
The PKI of participant A, B, C, D is sent to the other side by service, and namely participant A has the PKI of participant B, C, D, and participant B has the PKI of participant A, C, D;
Participant A is when sending chat content, and in use meeting room, except oneself, the PKI of other participants is encrypted information respectively, namely uses the PKI of B, C, D to information encryption;
Information after encryption is sent to counterpart terminal by server, namely uses the information of B public key encryption to send to the user terminal of participant B, uses C public key encryption information to send to the user terminal of participant C;
The user terminal of B and C uses local PKI to be decrypted the ciphertext received, and checks message content;
It is the same that other participant sends information.
Embodiment five
Chatroom time adjacent
Server during chatroom, selectes participant A, B, C, D when creating adjacent;
The PKI of participant A, B, C, D is sent to the other side by service, and namely participant A has the PKI of participant B, C, D, and participant B has the PKI of participant A, C, D;
Participant A is when sending chat content, and in use meeting room, except oneself, the PKI of other participants is encrypted information respectively, namely uses the PKI of B, C, D to information encryption; After the information of encryption is sent to server by the user terminal of A, party A-subscriber's terminal can delete the other side's PKI, namely deletes the PKI of B, C, D, when again sending information, need re-establish connection, repeat above-mentioned steps.
Information after encryption is sent to counterpart terminal by server, namely uses the information of B public key encryption to send to the user terminal of participant B, uses C public key encryption information to send to the user terminal of participant C;
The user terminal of B and C uses local PKI to be decrypted the ciphertext received, and checks message content;
It is the same that other participant sends information.
The invention has the beneficial effects as follows:
By technical scheme provided by the invention.Ensure that the fail safe of message content between user.Use unsymmetrical key to be encrypted both sides' message content, just can see message content after only having communicating pair to decipher, server also cannot check the content of message.The safety of Content of Communication can be protected, prevent from being checked by third party.For user creates the logical information environment of a safety.
Through the above description of the embodiments, those skilled in the art can be well understood to the present invention can by hardware implementing, and the mode that also can add necessary general hardware platform by software realizes.Based on such understanding, technical scheme of the present invention can embody with the form of software product, it (can be CD-ROM that this software product can be stored in a non-volatile memory medium, USB flash disk, portable hard drive etc.) in, comprise some instructions and perform method described in each embodiment of the present invention in order to make a computer equipment (can be personal computer, server, or the network equipment etc.).
Be only several specific embodiment of the present invention above, but the present invention is not limited to above-described embodiment, the changes that any person skilled in the art can think of all should fall into protection scope of the present invention.

Claims (10)

1. a method for asymmetric encryption message, is characterized in that, the method comprises:
The PKI of at least one receives information method, subscriber terminal of the pre-established communication that information sender user terminal reception server sends;
Information sender user terminal uses public-key to after transmission information encryption, and ciphertext is sent to server;
The ciphertext that information sender user terminal sends is transmitted to the receives information method, subscriber terminal of built vertical communication by server;
Receives information method, subscriber terminal to the decrypt ciphertext received, checks the information content by private key.
2. the method for claim 1, is characterized in that, the buddy list of server maintenance user terminal, detect pre-communication at least two user terminals, the user terminal to pre-communication sends the PKI of good friend's user terminal.
3. the method for claim 1, is characterized in that, described information sender user terminal uses public-key to after transmission information encryption, ciphertext is sent to server, specifically comprises:
Ciphertext is sent to server after using the PKI of good friend's user terminal of pre-communication to encrypt respectively transmission information by information sender user terminal.
4. the method for claim 1, is characterized in that, described receives information method, subscriber terminal, is also comprised after checking the information content the decrypt ciphertext received by private key:
Reply ciphertext is sent to server after using public-key and encrypting return information by receives information method, subscriber terminal, the reply ciphertext of receives information method, subscriber terminal is transmitted to the information sender user terminal of built vertical communication by server, information sender user terminal to the decrypt ciphertext received, checks the information content by private key.
5. method as claimed in claim 4, is characterized in that, reply ciphertext is sent to server after using public-key and encrypting return information by described receives information method, subscriber terminal, specifically comprises:
Receives information method, subscriber terminal uses the PKI of information sender user terminal, to after return information encryption, reply ciphertext is sent to server.
6. a system for asymmetric encryption message, is characterized in that, this system comprises:
Server, for sending the PKI of at least one receives information method, subscriber terminal of pre-established communication to information sender user terminal, and is transmitted to the receives information method, subscriber terminal of built vertical communication by the ciphertext that information sender user terminal sends;
Information sender user terminal, for receiving the PKI that described server sends, using public-key to after transmission information encryption, ciphertext is sent to server;
Receives information method, subscriber terminal, for by private key to receive server forward decrypt ciphertext, check the information content.
7. system as claimed in claim 6, it is characterized in that, described server comprises:
Buddy list maintenance module, for the buddy list of maintenance customer's terminal;
Detection module, for detect pre-communication at least two user terminals;
Sending module, for sending the PKI of good friend's user terminal to the user terminal of pre-communication.
8. system as claimed in claim 6, it is characterized in that, described information sender user terminal comprises:
Encrypting module, the PKI for the good friend's user terminal using pre-communication is encrypted respectively to transmission information, generating ciphertext;
Ciphertext sending module, for sending to server by ciphertext;
Ciphertext receiver module, for the reply ciphertext that reception server forwards;
Reply decrypt ciphertext module, for by private key to the decrypt ciphertext received, check the information content.
9. system as claimed in claim 6, it is characterized in that, described receives information method, subscriber terminal comprises:
Return information encrypting module, for using public-key to return information encryption, generating and replying ciphertext;
Reply ciphertext sending module, for reply ciphertext is sent to server.
10. system as claimed in claim 9, it is characterized in that, described receives information method, subscriber terminal also comprises:
Replying ciphertext encryption submodule, for using the PKI of information sender user terminal, reply ciphertext being generated to return information encryption.
CN201510347584.4A 2015-06-19 2015-06-19 Asymmetric message encryption method and system Pending CN104954378A (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201510347584.4A CN104954378A (en) 2015-06-19 2015-06-19 Asymmetric message encryption method and system

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201510347584.4A CN104954378A (en) 2015-06-19 2015-06-19 Asymmetric message encryption method and system

Publications (1)

Publication Number Publication Date
CN104954378A true CN104954378A (en) 2015-09-30

Family

ID=54168731

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201510347584.4A Pending CN104954378A (en) 2015-06-19 2015-06-19 Asymmetric message encryption method and system

Country Status (1)

Country Link
CN (1) CN104954378A (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106656739A (en) * 2016-09-22 2017-05-10 北京海泰方圆科技股份有限公司 E-mail transmission method, E-mail transmission device and E-mail transmission system
CN106682520A (en) * 2016-11-17 2017-05-17 精硕科技(北京)股份有限公司 Data exchange method and system
CN107770127A (en) * 2016-08-17 2018-03-06 北京京东尚科信息技术有限公司 The transmission method and device of a kind of data
WO2018058616A1 (en) * 2016-09-30 2018-04-05 深圳市华傲数据技术有限公司 Data relay centre-based encryption method and apparatus
CN109462594A (en) * 2018-11-28 2019-03-12 视联动力信息技术股份有限公司 A kind of data processing method and system based on view networking
CN109587099A (en) * 2017-09-29 2019-04-05 武汉斗鱼网络科技有限公司 One kind carrying out guard method and device to privacy of user in Video chat
WO2019072042A1 (en) * 2017-10-10 2019-04-18 中兴通讯股份有限公司 Method and device for preventing message leak
CN112437044A (en) * 2020-11-03 2021-03-02 建信金融科技有限责任公司 Instant messaging method and device

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001063831A1 (en) * 2000-02-24 2001-08-30 Valicert Corporation Mechanism for efficient private bulk messaging
US20050010801A1 (en) * 2003-06-25 2005-01-13 Terence Spies Identity-based-encryption messaging system with public parameter host servers
CN1859081A (en) * 2006-02-17 2006-11-08 华为技术有限公司 Immediate news enciphering transmission method and system
CN101123495A (en) * 2007-09-07 2008-02-13 农革 A data encryption, decryption system and method
CN101917710A (en) * 2010-08-27 2010-12-15 中兴通讯股份有限公司 Method, system and related device for mobile internet encryption communication

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2001063831A1 (en) * 2000-02-24 2001-08-30 Valicert Corporation Mechanism for efficient private bulk messaging
US20050010801A1 (en) * 2003-06-25 2005-01-13 Terence Spies Identity-based-encryption messaging system with public parameter host servers
CN1859081A (en) * 2006-02-17 2006-11-08 华为技术有限公司 Immediate news enciphering transmission method and system
CN101123495A (en) * 2007-09-07 2008-02-13 农革 A data encryption, decryption system and method
CN101917710A (en) * 2010-08-27 2010-12-15 中兴通讯股份有限公司 Method, system and related device for mobile internet encryption communication

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN107770127A (en) * 2016-08-17 2018-03-06 北京京东尚科信息技术有限公司 The transmission method and device of a kind of data
CN106656739A (en) * 2016-09-22 2017-05-10 北京海泰方圆科技股份有限公司 E-mail transmission method, E-mail transmission device and E-mail transmission system
WO2018058616A1 (en) * 2016-09-30 2018-04-05 深圳市华傲数据技术有限公司 Data relay centre-based encryption method and apparatus
CN106682520A (en) * 2016-11-17 2017-05-17 精硕科技(北京)股份有限公司 Data exchange method and system
CN109587099A (en) * 2017-09-29 2019-04-05 武汉斗鱼网络科技有限公司 One kind carrying out guard method and device to privacy of user in Video chat
WO2019072042A1 (en) * 2017-10-10 2019-04-18 中兴通讯股份有限公司 Method and device for preventing message leak
CN109462594A (en) * 2018-11-28 2019-03-12 视联动力信息技术股份有限公司 A kind of data processing method and system based on view networking
CN112437044A (en) * 2020-11-03 2021-03-02 建信金融科技有限责任公司 Instant messaging method and device

Similar Documents

Publication Publication Date Title
CN104954378A (en) Asymmetric message encryption method and system
CN101188496B (en) A SMS encryption transport method
CN103338437B (en) The encryption method of a kind of mobile instant message and system
CN104618110B (en) A kind of VoIP security conferences session key transmission method
CN105323070B (en) A kind of safety E-mail implementation method based on digital envelope
US9130744B1 (en) Sending an encrypted key pair and a secret shared by two devices to a trusted intermediary
CN107483505B (en) Method and system for protecting user privacy in video chat
CN107342977A (en) Suitable for the information security method of point-to-point instant messaging
CN107181584B (en) Asymmetric completely homomorphic encryption and key replacement and ciphertext delivery method thereof
Lee et al. Security flaw of authentication scheme with anonymity for wireless communications
CN103973713A (en) Transfer method, extraction method and processing system for electronic mail information
CN103795966A (en) Method and system for realizing safe video call based on digital certificate
CN110071863A (en) A kind of instant communication users group's encryption method based on id password
CN104009841B (en) A kind of message encryption method under instant messaging situation
CN109005151A (en) A kind of encryption of information, decryption processing method and processing terminal
CN108390755A (en) The safe input method of SIM pasting cards based on built-in security chip
CN106878005B (en) Root key management method and device based on network friends
CN100588153C (en) Multicast data enciphered transmission method
Bian et al. Off-the-record instant messaging for group conversation
Schliep et al. Consistent synchronous group off-the-record messaging with sym-gotr
CN111526131B (en) Anti-quantum-computation electronic official document transmission method and system based on secret sharing and quantum communication service station
CN110321722B (en) DNA sequence similarity safe calculation method and system
CN102739604B (en) The method and system of secure transmission of media information
CN101729533B (en) Method and system for transmitting delay media information of IP multimedia subsystem
Firoozjaei et al. O2TR: Offline OTR messaging system under network disruption

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
RJ01 Rejection of invention patent application after publication

Application publication date: 20150930

RJ01 Rejection of invention patent application after publication